[Systems] [support.osuosl.org #10742] sugarlabs.org nameservers

[Bernie Innocenti via RT]

On Wed, 2010-01-13 at 18:31 +0000, Brian Henderson via RT wrote:
> On Fri Jan 08 08:34:29 2010, bernie at codewiz.org wrote:
> > Please, add our new master DNS to the list of allowed masters:
> > 
> >   ns1.sugarlabs.org  (140.186.70.102, 2002:8cba:4666::1)
> > 
> > Also, it looks like one of the domains somosazucar.org and
> > somosazucar.net isn't configured in the osuosl auth nameservers.
> 
> I've added somosazucar.net to the osuosl nameservers, but I'm not sure
> what you mean by 'the list of allowed masters'.

How do the osuosl slave nameservers check authorization to update the
zone?

Often, the slaves configuration specifies the list of IPs which are
allowed to send  notifies and perform zone transfers. We're moving our
master nameserver to ns1.sugarlabs.net, so I thought it's necessary to
add its IP (140.186.70.102, 2002:8cba:4666::1) to this list.

It would probably be safer and more flexible if we could instead switch
to use a symmetric key (or even dnssec, if we can make sense of it). But
this would require some experimentation on our side.

-- 
   // Bernie Innocenti - http://codewiz.org/
 \X/  Sugar Labs       - http://sugarlabs.org/